{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":16687,"path":"governance-risk-compliance/create-bia-in-uib-ws.md","title":"Create a business impact analysis","bundle":null,"doc_type":null,"release":"australia","body":"\n# Create a business impact analysis\n\nCreate a business impact analysis in BCM UI Builder Workspace to get the necessary information for a plan.\n\n## Before you begin\n\nRole required: sn\\_bia.bia\\_admin, sn\\_bia.bia\\_manager, sn\\_bcm.program\\_manager, sn\\_bcm.planner\n\n## About this task\n\nBeginning with the Yokohama release, you can configure a business impact analysis \\(BIA\\) template with a legacy assessment or Smart assessment. The Smart assessment offers multiple question types and uses impact automation to calculate the RTO, RPO, and recovery tier based on your answers. To configure a BIA template with the legacy or Smart assessment, see [Configure BIA templates with legacy assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/configure-bia-template-uib-ws.md) or [Configure BIA templates with Smart Assessment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/conf-bia-temp-smart-asmt-type.md).\n\nBeginning with the Xanadu release, you can use the updated dependencies from the latest BIA record to conduct a dependency assessment on an asset. Using these updated dependencies enables for a precise execution of the business impact analysis. The business impact analysis is enhanced through the implementation of these updates:\n\n- Access the latest BIAs of the dependent items and their recovery objectives such as Recovery Time Objectives \\(RTOs\\), Recovery Point Objectives \\(RPOs\\), and Recovery Tiers.\n- Configure the columns in the dependency assessment of a BIA.\n- Schedule automated updates for the dependencies from the CMDB.\n- Configure the updates to be done after a manual review.\n\nMoreover, information from the Related item BIA, Related item Recovery Time Objective \\(RTO\\), Related item Recovery Point Objective \\(RPO\\), and Related item Recovery Tier columns is used to ascertain the required recovery timeframe and data backup needs. The updated values are then displayed in the Required Recovery Timeframe and Required Data Backup columns of the BIA record.\n\nThe BIA Manager \\(sn\\_bia.bia\\_manager\\) now includes the Doc writer \\(sn\\_doc.writer\\) role that provides read and write permissions to the document templates.\n\nYou can assign ownership of a business impact analysis to an individual owner, to an owner group, or to both. When you create a BIA, you're added as the **BIA owner** by default. To assign the BIA to a group, select a group in the **BIA owner group** field. The list shows only groups that hold the BIA planner or BIA manager role. You must provide either a **BIA owner** or a **BIA owner group** to save the record. When you select an owner group, the **BIA owner** field is limited to members of that group. Clear the **BIA owner** field to assign the BIA to the group only. All members of the owner group have the same edit rights on the BIA as the owner.\n\n\\[Omitted image \"bia-owner-group-field.png\"\\] Alt text: Create Impact analysis form with the BIA owner and BIA owner group fields.\n\n## Procedure\n\n1. Navigate to **Workspaces** > **Business Continuity Workspace**.\n\n2. In the List view, navigate to **Business Impact Analysis** and select **New**.\n\n The **Create Impact analysis** form is displayed as shown in the example.\n\n \\[Omitted image \"create-bia-record-group-fields.png\"\\] Alt text: Group ownership fields.\n\n3. On the **Details** tab of the **Create Impact analysis** form, fill in the required fields.\n\n For more information on the fields, see [Create Impact analysis form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/create-new-impact-analysis-reference-form-bcm-uib-ws.md).\n\n The business impact analysis is created in the **Draft** state and it is displayed in the List view. The state and details of the business impact analysis are displayed in these tabs:\n\n - **Overview**: You can view the current state and overall state progression for the business impact analysis.\n - **Details**: You can add the details of the business impact analysis such as its name, template, business unit, department, and so on.\n - **Assessment**: You can fill in responses to the assessment questionnaires for the business impact analysis in the **Recovery time objective assessment**, **Recovery point objective assessment**, and **Dependency assessment** cards.\n4. In the **Details** tab, review the RTO details for the BIA.\n\n The **Finalized RTO** field is auto-calculated according to the values in the **Recovery time objective** and **Adjusted RTO** fields available on the same form.\n\n If the BIAs already have the **Recovery time objective** field, the application uses that Recovery time objective value automatically for the finalized RTO. If the BIA has the **Adjusted RTO** field, the application uses that Adjusted RTO value automatically for the finalized RTO. For information on the field, see the field description in the [Create Impact analysis form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/create-new-impact-analysis-reference-form-bcm-uib-ws.md).\n\n The example shows that the **Finalized RTO** field is empty because the application didn't run the fix script.\n\n \\[Omitted image \"finalized-rto-rpo.png\"\\] Alt text: RTO.\n\n5. Assign BIA ownership in the User Administration or Assignment details section of the form.\n\n 1. To assign group ownership, select the **BIA Owner group** field and select a group from the filtered list.\n\n Only groups with the sn\\_bia.bia\\_planner or sn\\_bia.bia\\_manager role are displayed.\n\n \\[Omitted image \"bia-owner-field.png\"\\] Alt text: BIA Owner field.\n\n 2. To assign an individual owner, select the **BIA Owner** field and select a user from the list.\n\n If you selected a group in the previous step, the list shows only members of that group. You can assign:\n\n - Individual owner only \\(leave BIA Owner group empty\\)\n - Group ownership only \\(leave BIA Owner empty\\)\n - Both group and individual owner\n At least one ownership field \\(group or individual\\) must be populated before saving.\n\n 3. Select **Save**.\n\n The BIA record ownership is assigned to the selected group, individual, or both. You can also view the group-owned records in the **My group's pending tasks** and **My group's items** tabs in the My Tasks page. For more information, see [My tasks page view](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/my-tasks-page-uib-ws.md).\n\n6. Add the RTO manually in the **Adjusted RTO** field as an optional step, add the reason for adjusted RTO, and save the changes.\n\n When you update the value in the **Adjusted RTO** field manually, the **Reason for Adjusted RTO** field is displayed. You can add the reason and save the changes.\n\n \\[Omitted image \"adjusted-rto-reason.png\"\\] Alt text: Reason.\n\n As a result, the **Finalized RTO** is populated with the **Adjusted RTO** value.\n\n \\[Omitted image \"finalized-rto.png\"\\] Alt text: Adjusted RTO.\n\n7. In the **Details** tab, review the RPO details for the BIA.\n\n The **Finalized RPO** field is auto-calculated according to the values in the **Recovery point objective** and **Adjusted RPO** fields available on the same form.\n\n If the BIAs already have the **Recovery point objective** field, the application uses that Recovery point objective value automatically for the finalized RPO. If the BIA has the **Adjusted RPO** field, the application uses that Adjusted RTO value automatically for the finalized RPO. For information on the field, see the field description in the [Create Impact analysis form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/create-new-impact-analysis-reference-form-bcm-uib-ws.md).\n\n8. Add the RPO manually in the **Adjusted RPO** field as an optional step, add the reason for adjusted RPO, and save the changes.\n\n When you update the value in the **Adjusted RPO** field manually, the **Reason for Adjusted RPO** field is displayed. You can add the reason and save the changes.\n\n As a result, the **Finalized RPO** is populated with the **Adjusted RPO** value.\n\n9. On the **Assessments** tab, view the impact analysis assessments and the dependency assessment.\n\n You can track data specific to the dependency types as shown in the examples.\n\n \\[Omitted image \"track-data-spe-to-dep-type-1.png\"\\] Alt text: Track data specific to the dependency types-1.\\[Omitted image \"track-data-spe-to-dep-type-2.png\"\\] Alt text: Track data specific to the dependency types-2.\n\n You can add details from the related BIAs as shown in the example.\n\n \\[Omitted image \"add-details-from-rel-bias.png\"\\] Alt text: Add details from related BIAs.\n\n Consider a scenario where you’re conducting an importance assessment for a service. This assessment is carried out by the business service owner or the business process owners. It encompasses all the necessary dependencies that support their daily operations. It includes teams, applications, hardware resources, vendors, and locations, to verify that the process is effectively completed and delivered.\n\n Beginning with the Xanadu release, when conducting a dependency assessment, the dependencies are pulled in and the requirements are visible within the same record. For example, the business requirement for Business Application: Acrobat specifies that the downtime shouldn’t exceed 72 hours, which is the established recovery time objective \\(RTO\\) by the business.\n\n \\[Omitted image \"rrt-example.png\"\\] Alt text: RRT example.\n\n However, the RTO committed by the IT team, as shown in the Related item RTO, is one month. The Related item columns \\(BIA, RTO, RPO, Recovery Tier\\) enable the BIA owner to evaluate data and determine necessary recovery timeframes and backup requirements.\n\n10. Launch the impact analysis assessment and respond to the questions.\n\n Previously, the **Assessments** tab in the BIA displayed a single assessment card and the **Open assessment** button. Beginning with the Yokohama release, the layout of the cards in the **Assessments** tab has been updated. The BIA now displays multiple assessments and dependency assessments in a two-column arrangement.\n\n \\[Omitted image \"asmt-tab-bia.png\"\\] Alt text: Assessments tab.\\[Omitted image \"asmt-rpo-page.png\"\\] Alt text: Assessment.\n\n The example shows the Recovery Time Objective \\(RTO\\) assessment.\n\n \\[Omitted image \"bia-new-asmt-rto-example.png\"\\] Alt text: RTO.\n\n The assessment cards are now displayed dynamically, enabling you to attach multiple assessments to a BIA. For instance, if you have one card, it is shown alone in a row. If you have seven cards, they are arranged in four rows \\(three rows with two cards each and one row with one card\\). You can add multiple assessments or just one.\n\n11. To perform Recovery time objective assessment, select the card for Recovery time objective assessment card and respond to the questions.\n\n12. To perform Recovery point objective assessment, select the card for the Recovery point objective assessment card and respond to the questions.\n\n13. Review the answers in the assessment questionnaire and select **Submit**.\n\n A message is displayed that the update has been successfully processed.\n\n14. Select **OK**.\n\n The assessment card in the **Assessments** tab is updated. Selecting the Dependency assessment card opens the BIA assessment.\n\n15. Complete the Dependency assessment.\n\n In the Dependency assessment, the Related item finalized RTO and Related item finalized RPO columns are now displayed. The values for these columns are derived from the dependencies related BIA.\n\n \\[Omitted image \"related-item-finalized-rto.png\"\\] Alt text: Related item finalized RTO.\n\n Consider an example where you have the BIA record that applies to the \"Acrobat\" application. The example shows that the \"Application downtime assessment for Acrobat\" BIA record applies to \"Acrobat\" and it has the Finalized RTO and Finalized RPO values filled in.\n\n \\[Omitted image \"acrobat-bia.png\"\\] Alt text: Acrobat BIA.\\[Omitted image \"acrobat-bia-fin-rto-example.png\"\\] Alt text: Values filled in.\n\n Example shows that \"Acrobat\" is added to the dependency assessment of the \"My Service Importance Assessment\" BIA record.\n\n \\[Omitted image \"acrobat-example.png\"\\] Alt text: Acrobat example.\\[Omitted image \"acrobat-bia-added.png\"\\] Alt text: BIA for Acrobat.\n\n When \"Acrobat\" is added, the Related item finalized RTO and Related item finalized RPO values are populated. These values are associated with the \"Acrobat\" BIA in the Dependency assessment of the \"Application downtime assessment for Acrobat\" BIA record.\n\n \\[Omitted image \"rel-item-fin-rto-output.png\"\\] Alt text: Related item finalized RTO output.\n\n16. To reassign the assessment to another user, select **More actions** and select **Reassign**.\n\n A message is displayed that the assessment is reassigned to another user. Only the assigned user can respond to the assessment.\n\n You can reassign assessments using the Reassign option in SAE or the contributors functionality.\n\n **Note:** If you open an assessment that isn’t assigned to you, a message is displayed that editing the assessment reassigns it to you. Currently assigned user can no longer edit the assessment. Select **Cancel** to cancel the assessment, select **Edit** to edit and reassign the assessment to you, or select **View** to view the assessment in read-only mode.\n\n When you choose **Reassign**, it provides a list of all users in the system. You must select a user with the BCM roles to reassign the BIA.\n\n17. To add a contributor from the list to the business impact analysis, launch the **Contributors** panel by selecting the **Contributors** icon in the side-bar and add a contributor.\n\n If you’re the BIA owner or BCM manager, you can add a contributor to the business impact analysis.\n\n **Note:** Even though the BIA contributors with the sn\\_bia.bia\\_contributor role have read access to the BIA, they can complete the assessments on the **Assessment** tab.\n\n The BIA contributors can’t edit the list of the contributors.\n\n When you add a contributor to the BIA, that contributor is synchronized to the linked Smart assessment. A contributor who holds an appropriate BIA role can open and complete the assessment. Synchronization of the contributor list requires the Collaborator plugin.\n\n18. Select **Submit**.\n\n A message is displayed that the assessment is successfully submitted.\n\n \\[Omitted image \"bia-asmt-comp.png\"\\] Alt text: Assessment submitted.\n\n If you want to update the result in the assessment, you can select the card to update the details. The assessment then moves to the **Open** state again. You can retake and resubmit the assessment, thus completing the workflow.\n\n19. To revert an archived BIA to the **Draft** state, select the **Edit** button.\n\n Starting with BCM release 9.0.x, you can revert an archived business impact analysis \\(BIA\\) to the **Draft** state by selecting the **Edit** button on the form. It helps you to have more flexibility in managing business impacted analyses and related records.\n\n20. To perform more actions on the BIA, select **More actions**.\n\n\n
\n\nStep\n\n\n\nDescription\n\n
\n\n**Select __Discuss__.**\n\n\n\nAdd the subject for the discussion and add participants that have access to the record. Include a brief message for the participants and select **Start discussion**.\n\n
\n\n**Select __Generate MS Word__.**\n\n\n\nGenerate a report of the BIA, BCP, exercise, or crisis record in Microsoft Word format. The Microsoft Word copy of the BIA record is successfully generated that you can download.\n\n
\n\n**Select __Generate PDF__.**\n\n\n\nGenerate a PDF of the BIA with the legacy or Smart Assessment. The PDF of the BIA record is successfully generated that you can download. In the Impact Assessments section of the PDF, details of the Smart assessment are covered, including questions and answers for RPO and RTO in a tabular format, along with dependencies, contributors, and attachments.\n\n
\n\n**Select __Copy__.**\n\n\n\nCreate a copy of the BIA. BIA details, including its state, assessments, questions, and answers, are copied into the instance and displayed on the home page in the BIA section and BIA list. Confirm the name of the new BIA.\n\nThe copied BIA inherits the original **BIA owner group** only. You're automatically assigned as the individual **BIA owner** of the copy.\n\n
\n\n**Select __360º view__.**\n\n\n\nGenerate 360º relationships for the BIA. A graphical presentation of the BIA and its relationships is displayed.\n\n
\n\n**Select __Delete__.**\n\n\n\nDelete the BIA record. A warning message is displayed that deleting the record results in an automatic deletion of related records, which may also cause a cascade of additional records to be deleted.\n\n
21. Review and confirm the group ownership fields in the PDF and Microsoft Word reports.\n\n The BIA Group owner and BIA Owner fields are shown in the following sample PDF report.\n\n \\[Omitted image \"grp-fields-bia-pdf-report.png\"\\] Alt text: Group fields in the report.\n\n22. View your BIA group's pending tasks and BIA owner's assigned items in the My tasks page.\n\n The BIA group's pending tasks and BIA owner's assigned items are shown in the following sample My tasks page.\n\n \\[Omitted image \"my-grp-pending-tasks.png\"\\] Alt text: BIA group's pending tasks and BIA owner's assigned items.\n\n23. To save the BIA record, select **Save**.\n\n\n- **[Create Impact analysis form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/create-new-impact-analysis-reference-form-bcm-uib-ws.md)** \nUse the Create Impact analysis form to add details about the business impact analysis, assessments, approvals, and so on in BCM Configurable Workspace.\n\n**Parent Topic:**[Structured workflows for BIAs](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/bia-tasks-performed-by-bia-owner.md)\n\n"}}